The details provided on an ADR report are confidential. They include personal data on the patient and the reporter. The disclosure of information and content of the report are based on the Medicines Act (395/1987).
According to subsection 2 of section 30 e (1258/2021) of the Medicines Act (395/1987), the marketing authorisation holder, parallel import authorisation holder and registration holder shall, as a guarantee of pharmacovigilance and patient safety on the part of the register holder, record in the ADR database all the necessary details concerning both identified and suspected ADRs, essential details concerning the medical conditions of the user of the medicine or person’s propensity for them, all medications, their therapeutic indications and ADRs, and for person identification, if available, the name, personal ID, age and gender of the user of the medicine. According to section 30 f (1258/2021) of the Medicines Act (395/1987), the information concerning the ADRs shall be reported to the EudraVigilance database.
There are no EU provisions on the precise content of an ADR report. National provisions therefore apply. Section 30 e (1258/2021) of the Medicines Act (395/1987) does not lay down any restrictions as regards the disclosure of information identifying the patient or the reporter. There are no restrictions either in the other provisions of the Medicines Act concerning ADR reporting.
Fimea considers that subsection 2 of section 30 f (1258/2021) of the Medicines Act (395/1987) should be interpreted in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation) of the European Parliament and Council and the data protection principles set out in the Commission Implementing Regulation (EU) 520/2012 on the performance of pharmacovigilance activities. In Fimea's view, this means that MAHs may be allowed to restrict certain parts of the personal data submitted to the EudraVigilance database (post-authorisation module, EVPM) with regard to the provision of the Medicines Act mentioned above. Neverthelss, MAHs must retain full information in their ADR databases according to section 30 e (1258/2021) of the Medicines Act (395/1987) so that the competent authority always has a possibility to receive further information on an ADR report and a person who has experienced the suspected ADR for a case assessment or for example for duplicate detection.
Based on the above, Fimea considers that MAHs do not need to submit all personal data of a patient to the EudraVigilance database (EVPM). Instead, MAHs must submit such part of the following information on a case-by-case basis, that it is still possible to identify any overlapping/duplicate reports: date of birth, gender, age, age group, initials, name.
If Fimea later finds that the instructions described here hinder pharmacovigilance and the processing of ADR reports excessively, the instructions will be updated if necessary.
Fimea has no special requirements for the reporter's information to be submitted to the EudraVigilance database (EVPM) but the Guideline on good pharmacovigilance practices (GVP) Module VI (EMA, HMA, pdf) should be followed.
24 Jan 2018, updated 19 Nov 2024